peworkshop/app/(main)/team/[teamId]/route.js

// app/api/teams/[teamId]/route.js
import { queryOne } from '../../../../lib/db';
import { getServerSession } from 'next-auth/next';
import { authOptions } from '../../../api/auth/[...nextauth]/route';

export async function GET(request, { params }) {
    const session = await getServerSession(authOptions);

    if (!session) {
        return Response.json({ error: 'Unauthorised' }, { status: 401 });
    }

    try {
        const { teamId } = params;

        // Convert teamId to number for proper comparison
        const requestedTeamId = parseInt(teamId, 10);
        const userTeamId = parseInt(session.user.teamId, 10);

        // Log for debugging
        console.log('Requested team:', requestedTeamId);
        console.log('User team:', userTeamId);
        console.log('User role:', session.user.role);

        // Ensure the user is requesting their own team or is an admin
        if (userTeamId !== requestedTeamId && session.user.role !== 'admin') {
            return Response.json({ error: 'Not authorized to view this team' }, { status: 403 });
        }

        const team = await queryOne('SELECT * FROM teams WHERE id = ?', [requestedTeamId]);

        if (!team) {
            return Response.json({ error: 'Team not found' }, { status: 404 });
        }

        return Response.json(team);
    } catch (error) {
        console.error('Team fetch error:', error);
        return Response.json({ error: 'Failed to fetch team details' }, { status: 500 });
    }
}